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1. X method for tracing an electronic device having an agent 
initiating communication and providing identifying indicia to a 
host sysoem, said electronic device connectable to said host system 
through a global network, said method comprising the steps of: 

[providing an Agent within the electronic device, the Agent 
configured toVransmit identifying indicia for the electronic 
device and/or ios device components to a host system at a 
predetermined timX without further intervention by the electronic 
device or user upon\activation; 
activating the Agent; 

at the predetermined time, the Agent establishing a 
communication link between the electronic device and the host 
system and transmitting tnfe identifying indicia to the host system 
without intervention by the ^electronic device or user; 

enabling the host systemxto determine the location of the 
electronic device based on tracing of the communication link] 

automatically providing saidVhost system with said identifying 
indicia through said global network^ for determining the identity of 
said electronic device; and 

providing said host system with oXe or more of the global 
network communication links used to enable transmission between 
said electronic device and said host system, said communication 
links used f or^Stetermining the location of &aid electronic device, 




The method of claxtn 1 wherein said global\network is the 
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3. The method of claim 1 wherein said electronic device is 
further connected to said host system through a telephone network, 
and said method further comprising the steps of: 

providing said identifying indicia to said host system through 
said telephone network; and 

determining the location of said electronic device by tracing the 
source of said identifying indicia within said telephone network. 



4 . The method of clarm 1 wherein said electronic device is 
further connected to said host system through a cablevision 
network, and said method further comprising the steps of: 

providing said identifying indicia to said host system through 
said cablevision network; and 

determining the location of said electronic device by tracing the 
source of said identifying indicia within said cablevision network. 

5. The method of claim 1 wherein said electronic device is 
further connected to said host system through a wireless radio 
frequency network, and said method further comprising the steps of: 

providing said identifying indicia to said host system through 
said wireless radio frequency network; and 

determining the location of said electronic device by tracing 
the source of said identifying indicia within said wireless radio 
frequency network. 

6 . The method of claim 1 wherein said electronic device is 
further connected to said host system through a wireless microwave 
network, and said method further comprising the steps of: 

providing said identifying indicia to said host system through 
said wireless microwave network; and 
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determining the location of said electronic device by tracing 
the source of said identifying indicia within said wireless 
microwave network . 

7. The method of claim 3 wherein said step of providing said host 
system with said identifying indicia through said global network, 
and said step of providing said identifying indicia to said host 
system through said telephone network occur at predetermined 
intervals . 

8 . The method of cl^irh 7 wherein said electronic device is lost 
or stolen and said method further including the step of tracing 
lost or stolen electronic devices. 


9. The method of cTaim 2 wherein said step of providing Said host 
system with said one or more of the Internet communication links is 
accomplished using a traceroute routine. 



10. The method of claini 1 wherein said step of providing said host 
system with said identifying indicia is accomplished by sending a 
data packet including address information relating to the source of 
the global network transmission. 



11. The method of claim 2 wherein said step of providing said host 
system with said identifying indicia is accomplished by sending a 
domain name service query with said identifying indicia encoded 
therein . 

12 . The method of clairrts,2 further including the step of providing 
a list of lost or stolen electronic devices to said host system and 
comparing said list of lost or stolen electronic devices with said 
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4 identifying indicia to determine if said electronic device is lost 

5 or stolen . - 
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13 . The method of clai^ 12 wherein said host system sends a signal 
through said Internet to said electronic device if it is determined 
to be lost or stolen indicating that said lost or stolen electronic 
device should initiate a traceroute routine. 



14. The method of claiiK 12 wherein said host system sends a signal 
through said Internet to said electronic device if it has been 
determined to be lost or stolen indicating that said electronic 
device should initiate a call to said host system via said 
telephone network . 
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15. The method of claim 11 wherein said identifying indicia is 
encoded within said domain name service query according to a 
predetermined scheme . 



16. The method of claiH 15 wherein said host system decodes said 
identifying indicia to determine the identity of said electronic 
device . 


1 17. The method of cla^m 1 wherein said electronic device is a 

2 - computer having^ a - hard drive . 


1 18. The method of clsaim 17 further including the step of providing 

2 said agent with deflection means to enable said agent to resist 

3 disablement attempts and evade detection. 
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1 19. The method of claim 18 wherein said deflection means deflects 

2 read and write attempts to the location where said agent is 

3 disposed. 

1 20. The method of claim lNvherein said step of evading detection 

2 is accomplished by providing\n agent which is operable without 

3 interfering with the normal operation of said electronic device. 

21. The method of c]^k^n 17 wherein said step of loading said agent 
within said computer is accomplished by loading, said agent within 

'3 the boot sector of \said hard drive . 

1 22. The method of claihj 17 wherein said step of loading said agent 

2 within said computer is accomplished by loading said agent within 

3 the partition sectoX v of^ said hard drive. 

1 '23. The method of claim 17 wherein said step of loading said agent 

2 within said computer is accomplished by loading said agent within 

3 an operating systemNfile on said hard drive. 

1 24. The method of clairrP23 wherein said operating system is MS-DOS 

2 and said operating ^system file is 10. SYS. 

1 25. The method qf clai\ 23 wherein said operating system is PC-DOS 

2 and said operating^system file is IBMBI0.COM. 


26. The method of claim 17 wherein said step of loading said agent 


2 within said computer is \ccomplished by loading said agent on the 

3 — ROM ■%re$-7- 
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1 27. The method of NN c^a^r^ 17 wherein said agent is a terminated and 

2 stay resident program. 

1 28. The method of clarha 17 wherein said agent is a virtual device 

2 driver program. 

3 ' \. ■ 

H 1 29. The method of clain\ 17 wherein said agent is an application 

/] 2 program . 

w \ 

/ 3_ 30. The method of cla\m 17 wherein said agent is a file filter 

2 program. \ 

1 31. The method of claim 1 wherein said agent provides said 

2 identifying indicia automatically and without user intervention. 

X ■ ' ' 

1 32. The method of clam 31 wherein said step of providing said 

2 host system with said identifying indicia occurs without causing 

3 audible or visible signals to be emitted from said electronic 

4 device . N^^^ 

1 33. The method of claim 2 wherein the communication link between 

2 said electronic device and said host system is provided through a 

3 link to a private network connection to the Internet. 

1 34. The method of claim 2 wherein the communication link between 

2 said electronic device and said host system is provided through a 

3 telephone line connected 'to an Internet provider. 

1 35. The method of claim 1 further comprising the step of assigning 

2 said identifying indicia to said agent wherein said identifying 

3 indicia comprises a unique electronic serial number, said 
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4 electronic serial number for enabling the determination of the 

5 identity of said V^ectronic device associated with said agent. 

1 36. The method of clairrNl further comprising the step of loading 

2 said agent within said electronic device for with said host system 

3 such that said agent evades detection. 

37. A method for monitoring an electronic device connectable to a 

2 host system through a global network, said electronic device having 

3 an agent, said agent providing identifying indicia for determining 

4 the identity of said electronic device, said method comprising the 

5 steps of : 

6 loading said agent within said device such that said agent 

7 evades detection; and 

8 automatically providing said host system with said identifying 

9 indicia through said network without causing audible or visual 
10 signals to be emitted from said electronic device. 

1 38. The method of claims 3 7 wherein said electronic device is 

2 further connected to said host system through a telephone network, 

3 and said method further includes the step of providing said 

4 identifying indicia to said host system through said telephone 

5 network . ^ 

1 39. The method of claim \37 wherein said step of providing said 

2 identifying indicia occurs automatically and without human 

3 intervention. 

1 40. The method of clairh^38 wherein said step of providing said 

2 host system with said identifying indicia through said global 

3 network, and said step of providing said identifying indicia to 
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said host system through said telephone network occur at 
predetermined internals . 

41. The method of claim 36 wherein said global network is the 
Internet and said step of providing said identifying indicia is 
accomplished by encoding a domain name service query to include 
said identifying i^^i^ia. 

42. The methodNDf claim 7 or 40 wherein said step of providing 
said host system wrtii said identifying indicia through said global 
network, and said stepN^f providing said identifying indicia to 
said host system through s^Ld telephone network occur 

■ simultciiieuujbjly . 

43. The method of clairm 1 wherein the Agent is encoded in one or 
more forms, including software, firmware and hardware. 

44. The method of^^ci^^ 43 wherein the Agent is encoded in one or 
more device components in the electronic device, including internal 
non-volatile memory device, communication device, processor, 
digital signal processor, integrated circuit and hardware circuit. 

45. The method of clainA44 wherein the internal non-volatile 
memory device includes one of ROM BIOS, ROM, EPROM, EEPROM and 
Flash ROM. 


46. The method of claim 44 wherein the communication device is a 
modem . 

47. The method of claifti 46 wherein the Agent establishes 
communication with the host system by using a command function 
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which initializes the communication and a call management function 
which interf aces\with the host system. 



48. The method df clkim 44 wherein the Agent establishes 
communication with\he host system independent of instructions from 
the electronic devices. 


The method. ofNclaihj 42 wherein the Agent is .activated 
independent of the computer's operating system. 

50. The method of claim, 42 wherein the Agent , is activated prior to 
loading the operating sys\em . 



Ln^^sys 


51. The method of claim 49 ^herein the Agent is activated by 
loading into an internal volatile 'memory and running the Agent 
prior to activating the operating system. 


52. The method of claim 50 further comprising the steps of: 
checking whether the Agent is also found on a hard disk within the 
electronic device; and 

copying the Agent to the hard disk prior to loading and running the 
Agent . 

53 . The method of claim\44 wherein a first component of the Agent 
is provided in a first device component and a second component of 
the Agent is provided in a second device component. 


54. The method of claita 53 wherein the first component of the 
Agent includes a secure protocol component of the Agent which 
communicates with the electronic device's operating system. 
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55. The, method of claim N 54 wherein the Agent immediately 
establishes the communication link with the host system to transmit 
.the identifying indicia of the electronic device if the secure 
protocol component fails to establish communication with the 
operating system. 

56. The method of clairtK53 wherein the second device component 
includes a hard disk drive. 

57. An apparatus \ithin an electronic device including an agent 
for initiating communication with a host monitoring system and 
sending signals to. a hc^st monitoring system providing identifying 
indicia comprising : 

the identifying indic\a includes location information; and 
the host monitoring system provided with telecommunication links 
for determining the ^Location cn^the electronic device based on 
location information wrfe^tin the identifying indicia. 

58. The apparatus of claim 57 wherein said electronic device is 
further connected to said host monitoring system through a 
cablevision network, and said apparatus further includes means for 
providing said identifying indicia to said host monitoring system 
through said cablevision network, and means for determining the 
location of said electronic device by tracing the source of said 
identifying indicia wiXhin said cablevision network. 

59. The apparatus of claim 57 wherein said electronic device is 
further connected to said host monitoring system through a wireless 
radio frequency network, and said apparatus further includes means 


for providing said identifying indicia to said host monitoring 
system through said wireless radio frequency network, and means for 
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6 determining the location of said electronic device by tracing the 

7 source of said identifying indicia within said wireless radio 

8 frequency network. 

1 60. The apparatus of claiA 57 wherein said electronic device is 

2 further connected to said host monitoring system through a wireless 

3 microwave network, and said apparatus further includes means for 

4 providing said identifying indicia to said host monitoring system 
through said wireless microwave network, and means for determining 
the location of said electronic device by tracing the source of 
said identifying indicia within said wireless microwave network. 


1 61. The apparatus of claim\ 57 wherein said electronic device is a 

2 computer having a hard drive . 


1 62. The apparatus of claimN 57 wherein said agent evades detection 

2 by operating without interfering with the normal operation of said 

3 electronic device. 

1 63 . The apparatus of claimNs7 wherein said means for providing 

2 said host monitoring system with said identifying indicia operates 

3 automatically and witHbut user intervention. 

1 64. The apparatus of claim 62 wherein said means for providing 

2 said host monitoring system with said identifying indicia for said 

3 electronic device occurs without causing audible or visible signals 

4 to be emitted from sa4d electronic device. 

1 65. The apparatus of clairrK 57 wherean said global network is the 

2 — to fcernet . - \ 
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1 66. The apparatus of cla^m 65 wherein said agent is provided with 

2 deflection means for evading detection and resisting disablement. 

1 67. The apparatus of N clai^ 66 wherein said deflection means 

2 deflect read and write attempts to the location on said hard drive 

3 where said agent is disposed. 

68. The apparatus of claim 65 wherein said identifying indicia is 

2 encoded within a domain name service query . 

1 69. The apparatus of r claim 68 wherein said host monitoring system 

2 includes means for decoding said identifying indicia to determine 

3 the identity of said ^ectronic device. 

1 70. The apparatus of /claim 65 wherein said means for providing 

2 said host monitoring system with said one or more global network 

3 communication links is accomplished using a traceroute routine. 

1 71. The apparatus of claimN 65 "^herein said Internet connection 

2 between said electronic device an«3 said host monitoring system is 

3 provided through a link to a privace network connection to the 

4 Internet. \ 

1 72. The apparatus of claim 69 wherein said link to a private 

2 network connection to the Internet is a wireless link. 

1 73. The apparatus of^cla^ wherein said\nternet connection 

2 between said electronic device and said host monitoring system is 

3 provided through a telephone line connected to ah Internet 

4 provider. 
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1 74. The apparatus of claim ^65 further including means for 

2 assigning said identifying indicia to said agent wherein said 

3 identifying indicia comprises a unique electronic serial number, 

4 said electronic serial number for enabling the determination of the 

5 identity of said electronic device associated with said agent. 

1 75. The apparatus of claim\f57 wherein said electronic device is 

2 further connected to said host monitoring system through a 

3 telephone network, and said apparatus further includes means for 
providing said identifying indicia to said host monitoring system 
through said telephone network, and means for determining the 

6 location of said electronic device by tracing the source of said 

7 identifying indicia within said telephone network. 


76. The apparatus of claim 75 wherein said means for providing 
said host monitoring system with said identifying indicia through 
said global network, and said means for providing said identifying 
indicia to said host monitoring system through said telephone 
network operate at predetermined intervals 


1 
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3 
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1 77. The apparatus of clainl 75 wherein said electronic device is 

2 lost or stolen . 



1 78. The apparatus of claim 75 further including means for 

2 providing a list of lost or stolen electronic devices to said host 

3 monitoring system and means for comparing said list of lost or 

4 stolen electronic devices with said identifying indicia to 

5 determine if said electronic device is lost or stolen. 


1 79. The apparatus of claihi 78 wherein said host monitoring system 

2 includes means for sending a signaY through the Internet to said 


154308.01 01 


Serial No.: 09/047,W0 


3 
4 
5 



electronic device i 
indicating that saic 
initiate said trace 



determined to be lost or stolen, 
or stolen electronic device should 
routine . 


80. The apparatus of claim 78 wherein said host monitoring system 
includes means for sending a signal through the Internet to said 
electronic device if it is determined to be lost or stolen 
indicating that said lost or stolen electronic device should 
initiate a call to said host monitoring system through said 
telephone network . 


1 81. The apparatus of claim 57 wherein the Agent is encoded in one 

2 or more forms, includ4^ig software, firmware and hardware. 

1 82. The apparatus of claiA 81 wherein 'the Agent is encoded in one 

2 or more device components in the electronic device, including 

3 internal non-volatile memory device, communication device*, 

4 processor, digital signal processor, integrated circuit and 

5 hardware circuit. 

1 83 . The apparatus of claim\*2 wherein the internal non-volatile 

2 memory device includes one of ROM BIOS, ROM, EPROM, EE PROM and 

3 Flash ROM. 


1 84. The apparatus of claim 83 wherein the communication device is 

2 a modem. 
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85. The apparatus of claim 8yl wherein the Agent comprises a 
command function which initializes communication with the host 
system and a call management function which interfaces with the 
host system. 
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86. The apparatus oft claim 82 wherein the Agent is configured to 
establish communication with the host system independent of 
instructions from the electronic device. 


87. The apparatus of clai*^83 wherein the Agent is configured to 
be activated independent of\the computer's operating system. 

88. The apparatus of claim\8 7\ where in the Agent is configured to 
be activated prior toxloading the operating system. 


89. The apparatus of clairisi 87 wheirein the Agent is configured to 
be loaded into an internal volatile \nemory and executed prior to 
^activating- the operating oyotcm: 



90. The apparatus of claim 88 wherein the Agent is further 
configured to check whether the Agent is also found on a hard disk 
within the electronic device and copying the Agent to the hard disk 
prior to loading and running the Agent . 



91. The apparatus of claim 8\2 wherein a first component of the 
Agent is provided in a first device component and a second 
component of the Agent provided in a second device component. 



92. The apparatus of claim 91 wherein the first component of the 
Agent includes a secure protocol component of the Agent which 
communicates with the electronic device's operating system. 



93 . The apparatus of claim 92 wherein, the Agent is configured to 
immediately establish the communication link with the host system 
to transmit the identifying indicia of the electronic device if the 
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secure protocol component fails to establish communication with 
operating system. 

94. The apparatus of claSj.m 91 wherein the second internal 
memory device is a hard disk drive. 
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